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t^laim Amendments 



This listing of the claims will replace all prior versions, 
and listings, of claims in the application: 

Claim 1 (currently amended) : A security module for use with a 
terminal, comprising 

a data interface adapted to be coupled to a terminal, for 
receiving one_^f part of an algorithm code e«# and 

the complete algorithm code from the terminal, with the 
algorithm code concerning a processing of secrets [[,]] ± 

an energy aj>ower interface for receiving supply e*e*gy Bower 
from the terminal; 

a volatile memory for storing the one of the part of the 
algorithm code ** and the complete algorithm code received via 
the data interface, said volatile memory being coupled to the 
enGrgy power interface in order to have e*e*gy power supplied 
thereto such that t he s ame said volatile memory will be 
cleared upon an interruption of the receipt of the supply 
energy power from the terminal; and 
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a pr oceseor for per.or^ the a^orith* code i- order to 
obcain a. a lg or itl ™ code reauXt that can Oe ^ *■ 
terminal . 

claim , (current^ — « ■ ^ ^ aCO ° rdin9 

v. .he securit y module further 
^^^^^l ^ ^it-hrn code , the secur X 

comprising: 

in which fehe-Rou x'ecciv^ a remainder 
a non-volatile memory in whicn «*e-™~^ 

of the algorithm code is stored alo,^^^^ 
.^IS^^ 

, • < n al> • A security module according to claim 1, 
Claim 3 (original), a ^ 

further comprising: 

, henH cation between the terminal 
a means for performing an authentication 

and the security module. 

claim 4 (current* amended) . X security ^ule accord^ to 
^ o!ai m 1. wherein the data interne i. arranged to 



receive £ ro ra the ter.inai *a±d th^^tH, P~ °* 

. lg orit to code ~ * - co^ete a 19 or ithm code in encrypted 

,. H . ate W ith the security module 
form andwith a certificate, wit 

further comprising: 
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v, .ode e* and the encrypted complete 
encrypted algorithm code e* ana 

algorithm code; and 

eans to, e^n* «- -""^ "* PreVen "" 9 • 

performing of the aigor 
of said certificate ±*e*&-^~~= 

receive nnl Y tne S^^-S 

module further comprising: 

it for controlling memory accesses of the 
a memory managing unit for con^ 

processor, with the *********** P 

^_ fiaee of the algorithm code, 
containing addresses ox 

n ^nded) • A security module according to 
Claim 6 (currently amended) . 

claim 1. further comprising: 

• inc a predetermined security condition and 
a means for monitoring a pre , errnitied 
• , he volatile memory if said predetermined 
for clearing the ^ 3aid gecurity edition 

— Edition is ««X • _ comprising ^ 

being selected from a plurality 
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operating parameters. 

,wo • A security module according to 
Claim 7 (currently amended) : A secu 

v, wi „ the algorithm code comprises a program 
w of- claim 1, wherein the aigor 

• , , hMk selected from a group 

code selected for carrying out a task 

. cryptographic algorithm, 

an asymmetric cryptographic algorithm, an KSA algorithm, a 
typographic process according to the DES standard, an 

an access function for accessing a 
elliptic curve process and an access 

^ security module as well as an 
irnl value stored o n the security 

run the digital value stored on 

access function for changing [ [all the_dial_ 

the security module . 

01aim . ,™ tly — — )■■ * — module aCC ° rdin9 C ° 

^^^^^^^ ch e p-. 

n ^ r(isg eg of computing components 
the algorithm code, memory addresses ot 

# ^na the algorithm code, or jump addresses 
necessary for performing the aig 

of the algorithm code. 

, j \ , A security module according to 
Claim 9 (currently amended) : A secur y 

v> the data Mer£ac* is adapted__to 
an y o£ claim 1, wherein the ciara 
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rs . eive the one of the part of th* al gorithm code and the 
. omD lete algorithm_ code several^ pes in different version*. 
with the volatile memory *e being, arranged for storing a newly 
received; altered pa^fe version of one of the part of the of 
the algorithm code and the complete algorithm code eve* such 
that the e*e*e^ previously received version of one of the part 
of the algorithm e ed e e* Uh c ntnrr^ and_J*e complete algorithm 
code is overwritten . 

Claim 10 (currently amended) : A security module according to 
Qny 0 £, claim 1, wherein said security module is designed as a 
chip card. 

Claim 11 (currently amended) : A process for computing an 
algorithm code result using a security module, comprising the 
steps of: 

receiving a^ea^ one of part of an algorithm code e* and the 
complete algorithm code by means of an e«e^y interface to_a 
terminal , with the algorithm code concerning a processing of 
secrets; 

M uluLllL ..iim-irvj mid storing the one of the part of the 
algorithm code or said and the complete algorithm code in a 
volatile memory of the security module, with the volatile 
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memory being coupled to the e*e*gy- interface, to be supplied 

with *fte*-€jy power , such that the same volatile memory will be 

cleared upon an interruption of the receipt of the supply 

energy power from the terminal [ [ : ] ] j_ 

performing said algorithm code on the security module in order 
to obtain an algorithm code result; and 

delivering said algorithm code result to the terminal^***" 

i l uai li iL j j u id v nlnt llc memory upon an 1 n tx i x uption of f h o 
■x cooipt of t h e ju pp ly onn- gy f vo m the t erminal. 

Claim 12 (currently amended) : A process according to claim 
H, M n ci an oaid ^L cjj u f ol n nrlng comprio no further comprising 
removing the security module from the terminal thereby causing 
«n interruption of the receip t of the supply power to the 
volatile memory fro m the terminal and clearing said volatile 

w upon interrupt ion of the receipt of supply power from 

the terminal ♦ 

Claim 13 (currently amended) : A terminal for use with a 
security module, comprising: 
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. deta ^ce adapted - - — »- ~ * — « ^ 

£or transmit^ at least part of an al 9 orlthm code or the 

otTO i e te ai g orlt h m — from the terminal - • — — 

a F/-\i- -receiving **** an algorithm 
of the security module and for receiving 

, , m the security module, with the algorithm code 
code result from the secur^y 

concerning a processing of secrets; and 

. n , prface for delivering supply e**e*gy P<>wer 
aMftG *gy a power interface 

to the security module, with the volatile memory heing 
applied hy the supply ™ ^ such that the ***e 
^ile_m^ will he cleared upon an interruption of the 
receipt of the supply 22«~ <~ « 

wit h the terminal, for each communication operation hetween 

• - . dm ' lay out- t n r> *** *** 

terminal and security module jurin 3 

aosis-eeed adapted .o^lna^-Siialeon^of^ 
se=!5 l S ^^ ES£ at^^ Se0d " 

Last the part of the alsorlthm code or the al 9 =r>thm 
eode to the volatile memory of the security module, — ■ 

■ algorithm oode result from the security 

sending, receive the algoritnm 

module . 
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Claim 14 (currently amended): A process for controlling 
within a Elurali^LOf communication operations, a security 
module using a terminal in order to obtain an algorithm code 
result from the security module, with the process comprising 
for each communication operation, performing the following 
steps during o ul and the game a single one of th e 
communication epe^e* operations with the security module: 

delivering supply e*e*gy £ower from the terminal to the 
security module; 

transmitting at least part of an algorithm code or the 
complete algorithm code from the terminal to a volatile memory 
of the security module, with the algorithm code concerning a 
processing of secrets, with the volatile memory being supplied 
by the supply *»e*gy Power, such that the *a*e vola tile memory 
will be cleared upon an interruption of the receipt of the 
supply e*e*gy power from the terminal; and 

receiving the an algorithm code result from the security 
module. 

Claim 15 (currently amended) : A process for communication 
between a security module and a terminal, comprising the steps 
of: 
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transferring at least one_of part of an algorithm code e* and 
the complete algorithm code from the terminal to the security 
module, with the algorithm code concerning a processing of 
secrets; 

v o latile st u ping said storing the one of t he part of the 
algorithm code and said complete algorithm code in a 
volatile memory of the security module, with the volatile 
memory being supplied by fefee supply e«e^gy power, such that 
the oame volatile memory will be cleared upon interruption of 
the receipt of the supply energy power from the terminal; 

performing said algorithm code on the security module in order 
to obtain an algorithm code result; 

delivering said algorithm code result to the terminal; and 

clearing said volatile memory upon an interruption of the 
receipt of the supply energy power from the terminal . 

Claim 16 (currently amended) : A process according to claim 
15, further comprising: 
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repeated sequentially transferring e£ a plurality of different 
versions of s aid the one of the part of the algorithm code 
and said complete algorithm code; and 

sequentially storing the repeatedly tranpforrcd vcroion the 
different versions of gaid the one of the part of the 
algorithm code or of and the complete algorithm code over the 
□ tored - part of the algorithm oodo or ovoar the complete otorcd 
algorithm oodo such that a respective previous version of the 
plurality of different versions of the one of the part of the 
algorithm code and the complete algorithm code is overwritten . 

Claim 17 (new) : A security module for use with a terminal, 
comprising: 

a data interface adapted to be coupled to a terminal, for 
receiving a first part of an algorithm code from the terminal, 
with the algorithm code concerning a cryptographic processing 
of data; 

a power interface for receiving supply power from the 
terminal ; 

a volatile memory for storing the first part of the algorithm 
code received via the data interface, said volatile memory 
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being coupled to said power interface in order to have power 
supplied thereto such that the volatile memory will be cleared 
upon an interruption of the receipt of the supply power from 
the terminal; 

a non-volatile memory in which a second part of the algorithm 
code which is a non-received remainder the algorithm code is 
stored; and 

a processor for performing the algorithm code in order to 
obtain cryptographically processed data that can be delivered 
to the terminal, wherein the first part of the algorithm code 
includes memory addresses of computing components necessary 
for performing the algorithm code, or jump addresses of the 
algorithm code pointing to partial routines of the algorithm 
code . 
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